Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.mft
File:                     40Y1lMN3zViH3pB4tLLozcTTrls.mft (raw, json)
Hash identifier:          EgkW7vRRSyOWa1H+fvFt1fJenEEdebkqyVbMngKOs+A=
Subject key identifier:   B3:2C:23:64:6E:FD:BE:33:C3:C9:F5:DF:8F:17:6F:28:A4:6A:84:05
Authority key identifier: E3:46:35:94:C3:77:CD:58:87:DE:90:78:B4:B2:E8:CD:C4:D3:AE:5B
Certificate issuer:       /CN=e3463594c377cd5887de9078b4b2e8cdc4d3ae5b
Certificate serial:       01962F0741A349EB3FE1591BFA02BCF6050B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/40Y1lMN3zViH3pB4tLLozcTTrls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.mft
Manifest number:          032E
Signing time:             Sun 13 Apr 2025 12:02:06 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:06 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:06 +0000
Files and hashes:         1: 40Y1lMN3zViH3pB4tLLozcTTrls.crl (hash: iqZnnFTkFwtRcRV1iaFOxJuWxyCS4daOzK+qalBn93E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:41:a3:49:eb:3f:e1:59:1b:fa:02:bc:f6:05:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3463594c377cd5887de9078b4b2e8cdc4d3ae5b
        Validity
            Not Before: Apr 13 12:02:06 2025 GMT
            Not After : Apr 14 12:02:06 2025 GMT
        Subject: CN=b32c23646efdbe33c3c9f5df8f176f28a46a8405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4e:0b:90:a1:af:3f:51:2d:e4:e8:13:5d:eb:
                    07:e0:ff:23:6c:c0:82:63:c4:a7:54:27:c4:f6:d8:
                    20:00:9f:fe:b5:7f:b7:37:f3:cc:fd:9c:31:9c:ac:
                    40:ac:b7:3d:f2:f7:ba:ba:e8:26:9c:5d:25:19:17:
                    4e:65:5f:81:4b:6a:7d:98:32:ef:5a:50:30:a8:3b:
                    1a:43:2a:fa:72:df:28:79:2d:da:fc:99:4c:84:65:
                    c1:c4:8c:1b:cf:0a:9e:b3:87:06:e7:72:8b:7e:4d:
                    e8:eb:85:8d:51:94:af:f7:90:52:29:0f:88:28:0f:
                    ec:45:32:f7:a2:35:a8:78:c3:56:64:93:61:99:d0:
                    00:c7:f8:c5:e7:e1:17:b4:cb:b4:92:bf:4a:5c:15:
                    cc:2d:aa:89:c6:c4:a8:79:33:5c:a4:e2:be:34:a2:
                    03:ba:c1:cb:74:90:98:07:b0:63:a8:2c:f6:e9:b8:
                    3d:f9:0c:bd:de:ef:9c:50:87:a1:7a:52:a9:fe:1b:
                    c9:14:8c:d4:68:f5:5a:e3:f0:98:84:aa:b1:45:9d:
                    d8:6b:7d:4f:94:8c:ef:4d:21:7e:3c:33:17:bb:9d:
                    5c:06:85:6f:ce:aa:d6:2d:17:fc:6f:02:53:9f:e1:
                    79:90:5a:7b:b4:a5:7a:85:44:96:cb:a0:ac:8d:4a:
                    05:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:2C:23:64:6E:FD:BE:33:C3:C9:F5:DF:8F:17:6F:28:A4:6A:84:05
            X509v3 Authority Key Identifier:
                keyid:E3:46:35:94:C3:77:CD:58:87:DE:90:78:B4:B2:E8:CD:C4:D3:AE:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40Y1lMN3zViH3pB4tLLozcTTrls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:b3:66:e4:95:36:61:b0:3a:a2:ec:ca:d6:56:79:23:f4:fc:
         33:ea:6b:c2:2c:08:65:37:01:ed:c2:67:50:c2:08:8c:cf:5f:
         cb:56:b7:bc:f9:64:1a:3a:c2:56:0f:4e:ca:f1:98:c8:16:7a:
         1a:d7:5e:ad:02:83:70:91:d6:86:b7:17:68:7b:04:49:c8:a8:
         44:44:78:4e:5d:f7:14:ed:b6:15:ab:a3:f6:6e:0d:ec:0d:47:
         bd:41:a4:ef:1c:66:a0:93:e2:1e:f3:b5:89:cc:6a:01:85:8d:
         28:08:70:c7:6b:e2:fd:b0:2e:e0:07:29:75:a2:39:99:10:8d:
         f5:7f:1b:69:8f:b1:d5:77:2a:ab:0c:65:3f:6d:58:a5:65:4f:
         64:1f:ee:69:04:ac:6e:8d:fe:3d:05:c2:79:1b:fc:06:3a:99:
         38:6e:c0:d0:c9:57:79:10:a1:3a:84:a0:7b:06:a0:28:e2:95:
         54:9a:4b:b5:ba:c3:23:66:00:49:50:fe:de:24:15:be:d7:4b:
         fe:c5:c1:bc:bf:93:26:e9:ef:c3:34:fb:3f:4f:96:80:53:a3:
         b2:0a:db:7f:c0:f4:04:4c:05:8d:19:48:f9:8a:5e:dd:b2:6a:
         b2:ef:61:9a:ba:e6:40:0b:8b:93:9c:86:33:85:9c:f8:1d:30:
         55:46:28:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvB0GjSes/4Vkb+gK89gULMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzNDYzNTk0YzM3N2NkNTg4N2RlOTA3OGI0YjJlOGNkYzRk
M2FlNWIwHhcNMjUwNDEzMTIwMjA2WhcNMjUwNDE0MTIwMjA2WjAzMTEwLwYDVQQD
EyhiMzJjMjM2NDZlZmRiZTMzYzNjOWY1ZGY4ZjE3NmYyOGE0NmE4NDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsk4LkKGvP1Et5OgTXesH4P8jbMCC
Y8SnVCfE9tggAJ/+tX+3N/PM/ZwxnKxArLc98ve6uugmnF0lGRdOZV+BS2p9mDLv
WlAwqDsaQyr6ct8oeS3a/JlMhGXBxIwbzwqes4cG53KLfk3o64WNUZSv95BSKQ+I
KA/sRTL3ojWoeMNWZJNhmdAAx/jF5+EXtMu0kr9KXBXMLaqJxsSoeTNcpOK+NKID
usHLdJCYB7BjqCz26bg9+Qy93u+cUIehelKp/hvJFIzUaPVa4/CYhKqxRZ3Ya31P
lIzvTSF+PDMXu51cBoVvzqrWLRf8bwJTn+F5kFp7tKV6hUSWy6CsjUoFrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLMsI2Ru/b4zw8n1348XbyikaoQFMB8GA1UdIwQY
MBaAFONGNZTDd81Yh96QeLSy6M3E065bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDBZMWxNTjN6VmlIM3BCNHRMTG96Y1RUcmxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9jNTcxY2UtZWYzYS00YTI4LWI1Yjgt
ZmVhMjM2ZjU0MDM0LzEvNDBZMWxNTjN6VmlIM3BCNHRMTG96Y1RUcmxzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9jNTcxY2UtZWYzYS00YTI4LWI1YjgtZmVhMjM2ZjU0MDM0
LzEvNDBZMWxNTjN6VmlIM3BCNHRMTG96Y1RUcmxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGLNm5JU2
YbA6ouzK1lZ5I/T8M+prwiwIZTcB7cJnUMIIjM9fy1a3vPlkGjrCVg9OyvGYyBZ6
GtderQKDcJHWhrcXaHsEScioRER4Tl33FO22Fauj9m4N7A1HvUGk7xxmoJPiHvO1
icxqAYWNKAhwx2vi/bAu4AcpdaI5mRCN9X8baY+x1XcqqwxlP21YpWVPZB/uaQSs
bo3+PQXCeRv8BjqZOG7A0MlXeRChOoSgewagKOKVVJpLtbrDI2YASVD+3iQVvtdL
/sXBvL+TJunvwzT7P0+WgFOjsgrbf8D0BEwFjRlI+Ype3bJqsu9hmrrmQAuLk5yG
M4Wc+B0wVUYozA==
-----END CERTIFICATE-----